Login Request a demo
Unscored severity · published Mar 2, 2007
CVE-2007-1168
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests…
–
CVSS
2.5%
EPSS
No
On KEV
Description
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SE
Serverprotect · Trend Micro
1.3; 1.25_2007-02-16; 2.5 · source: NVD
Affected product
SE
Serverprotect
Trend Micro
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1168
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1168
Vendor Advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=477
Patch
http://secunia.com/advisories/24264
Patch
http://securitytracker.com/id?1017685
Patch
http://www.securityfocus.com/bid/22662
Patch
http://www.trendmicro.com/download/product.asp?productid=20
www.vupen.com
http://www.vupen.com/english/advisories/2007/0691
More from Serverprotect
–
CVE-2008-0014
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly…
–
CVE-2008-0013
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly…
–
CVE-2008-0012
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly…
–
CVE-2007-0074
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly…
–
CVE-2007-0073
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly…